GH-500 Exam Questions

Secret scanning will ignore a secret_scanning.yml file that

By default, what is the minimum role needed to bypass push protection in a repository?

By default, who will receive an e-mail when a secret has been detected in a repository? Each answer presents a complete solution. (Choose two.)

Which of the following workflow events would trigger a dependency review? (Each answer presents a complete solution. Choose two.)

A repository's dependency graph includes:

Assuming there is no custom Dependabot behavior configured, where possible, what does Dependabot do after sending an alert about a vulnerable dependency in a repository?

How many alerts are created when two instances of the same secret value are in the same repository?

In the pull request, how can developers avoid adding new dependencies with known vulnerabilities?

If notification and alert recipients are not customized, which users receive notifications about new Dependabot alerts in an affected repository?

Which Dependabot configuration fields are required? Each answer presents part of the solution. (Choose three.)

As a repository owner, you want to receive specific notifications, including security alerts, for an individual repository. Which repository notification setting should you use?

Which of the following options would close a Dependabot alert?

You are a maintainer of a repository and Dependabot notifies you of a vulnerability. Where could the vulnerability have been disclosed? Each answer presents part of the solution. (...

Which syntax in a query suite tells CodeQL to look for one or more specified .ql files?

A colleague ignores a code scanning alert. What are the implications of the colleague's action? Each answer presents part of the solution. (Choose three.)

Which of the following formats are used to describe a code scanning alert from CodeQL?

You are configuring a CodeQL workflow for compiled languages. What happens if your workflow uses a language matrix?

Using advanced setup, which code scanning configuration would help detect vulnerabilities before they are added to a shared branch?

What is code scanning?

You are creating an application that will utilize the code scanning application programming interface (API) to export a repository's alerts into a comma separated values (CSV) file...

To be compatible with code scanning, what data format must third-party code scanning tools use for output?

Where can a user change a repository's code scanning severity threshold that fails a pull request status check?

Which of the following is required to block the merge of a pull request containing critical vulnerabilities? Each correct answer presents part of the solution. (Choose two.)